Snort mailing list archives
Re: MiniDuke sigs?
From: James Lay <jlay () slave-tothe-box net>
Date: Fri, 01 Mar 2013 14:52:50 -0700
On 2013-03-01 14:43, Joel Esler wrote:
On Mar 1, 2013, at 4:05 PM, James Lay <jlay () slave-tothe-box net [2]> wrote:svchost.jpg? Really?http://blog.fireeye.com/research/2013/02/yaj0-yet-another-java-zero-day-2.html[1]We are working on coverage for this now. Not just what you see in the screenshot there, since the CNC is already down. -- JOEL ESLER Senior Research Engineer, VRT OpenSource Community Manager Sourcefire
Excellent..thanks Joel! James ------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_feb _______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- MiniDuke sigs? James Lay (Mar 01)
- Re: MiniDuke sigs? Joel Esler (Mar 01)
- Re: MiniDuke sigs? James Lay (Mar 01)
- Re: MiniDuke sigs? Joel Esler (Mar 01)